Garrett Wollman <wollman@csail.mit.edu> writes:
> Over the past few months, our mirror server has been the subject of an
> apparent DDoS. Today I tracked it down to millions of attempted
> downloads from `http://postgres.csail.mit.edu/repos/` and I have
> configured the server to return a 403 error for that part of the site;
> we are happy to provide a mirror service for humans to use but we did
> not sign up for 720,000 (and counting) random Linux machines around
> the world to abuse our server and interfere with our own local access
> to the archives.
That is very strange. What did you have stored there --- was it a
mirror of our source code, or executables, or ???
> I have no idea how or why anyone got the idea to put
> postgres.csail.mit.edu into their apt or dnf configuration, but we
> can't and won't allow that.
I can assure you that the Postgres project didn't do that nor
encourage anyone else to do so. I'm kind of mystified why anyone
would have chosen csail as a source for our stuff, though.
regards, tom lane
